r/crypto

Barking Up The Ratchet Tree – MLS Is Neither Royal Nor Nude

As a programmer non-cryptographer, what will I be missing in RFCs?

I am a decent C programmer, but I have next to zero knowledge in cryptography. Now, if I was to implement "naïvely" some well-established crypto-related standard protocol like https://www.ietf.org/rfc/rfc2898.txt or https://www.rfc-editor.org/rfc/rfc7296.txt , what do you think would be the risks …

Pollard Rho - Pseudorandom Sequences

Hi, I’m currently writing my bachelor thesis about factoring Algorithms. One of them is Pollard Rho, so here is my question: In his paper Pollard states that the pseudorandom sequence: $x_{i+1}=x_{i}^{2}$ shouldn’t be used for his algorithm. Why so? I …

Tips on Auditing Cryptographic Source Code

I am interested in auditing cryptographic source code on my spare time. Some of the projects I am considering auditing include GNUPG, Sequoia-PGP, Mullvad, and Rustls. For those of you who have experience auditing cryptographic source code what advice would …

Why was Classic McEliece Rejected for ML-KEM?

I have learnt that Classic McEliece made it to round 3 of NIST but was rejected in favor of Kyber for ML-KEM. McEliece was introduced in 1978--around the same time as RSA and remains resistant to classical and post-quantum cryptanalysis …

Any Practical Use of Menezes Qu Vanstone over Authenticated Diffie-Hellman

I was studying Menezes Qu Vanstone from Serious Cryptography 2nd Edition. Aumasson mentions MQV is elegant and more secure than Authenticated Diffie-Hellman. You cannot break MQV just by leaking ephemeral secrets. Even if a long-term key is compromised the previously …

Decrypting Memory Chip Data

I just got two Nitrokey 3C NFC keys. My first time using 2FA, first time having keys

Hi I am new to understanding how to be more secure online. I bought two Nitrokey 3C NFC keys, one for a primary, and one for a backup. I have successfully gone into terminal on my Macbook M1 Air and …

Signal protocol in JavaScript

i wanted the signal protocol in javascript that would be able to run in the browser. * [https://www.reddit.com/r/crypto/comments/1mi4ooa/looking\_for\_the\_signal\_protocol\_in\_javascript](https://www.reddit.com/r/crypto/comments/1mi4ooa/looking_for_the_signal_protocol_in_javascript) * [https://www.reddit.com/r/cryptography/comments/1mi5z1b/looking\_for\_the\_signal\_protocol\_in\_javascript](https://www.reddit.com/r/cryptography/comments/1mi5z1b/looking_for_the_signal_protocol_in_javascript) i decided to get AI to teach me with examples. * [https://cryptography.positive-intentions.com/?path=/story/signal-protocol-x3dh-key-exchange--educational-guide](https://cryptography.positive-intentions.com/?path=/story/signal-protocol-x3dh-key-exchange--educational-guide) * [https://github.com/positive-intentions/cryptography](https://github.com/positive-intentions/cryptography) i had it create this page …

Heracles attack - Chosen Plaintext Attack on AMD SEV-SNP